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Commissioner for Patents 
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Sir : 

In compliance with Rules 1.97 and 1.98, and in ful- 
fillment of the duty of disclosure under Rule 1.56, the accom- 
panying documents, copies of which are attached to this state- 
ment, are made of record on the enclosed Form PTO-1449. 

A concise explanation of the relevance of these 
items is that these references were cited by the Japanese 
Patent Office in an Official Action. A copy of the Japanese 
Official Action in which they were cited is attached hereto, 
with what is believed to be the pertinent portion enclosed in 
a wavy line. An English translation of the enclosed portion 
is also attached hereto. 

Under the provisions of 37 CFR 1.97(e), the under- 
signed hereby certifies that each item of information con- 
tained in this Information Disclosure Statement was first 
cited in any communication from a foreign Patent Office in a 
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counterpart foreign application not more than three months 
prior to the filing of this Statement. 
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NAKAE et al. 

U. S. Application No. 10/643,864 
Our Ref. 8046-1041 

Reason A 

Claims 1, 2, 6, 11, and 22-27 
Remarks* 

In Citation 1, for the purpose of invasion, reference is made to making a collection 
which includes a network connection accompanying process execution; file 
input/output, and events relating to process (reduction), including appearance and 
disappearance related (new process ID). 

Claims 3, 4, 7-9, 12-14 
Citations 1 and 2 

Detecting invasion according to conformance with known invasive patterns is 
already known as recorded (in the left column of p. 61) in Citation 2. 

Claims 5, 10 and 15 
Citations 1-3 

Remarks- 

For example, establishing conditions relating to an access source relative to the file 
input/output process, is already known, as recorded (in the right column of p. 137) 
in Citation 3, and as a rule there is nothing exceptional recognized corresponding to 
the conditions and process relating to the access source. 

Claims 28-39 
Citations 1-4 

Remarks- 

As recorded in Citation 4, controlling access relative to an attack is already known. 

Reason B 
Claim 2 
Application 5 



Remarks^ 

There is no exceptional difference in comparison with the claim of [0025] of the 
following application 5. 
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Record of the Examination Results relating to Documents of the Prior Art 
- Examined Technical Field: IPC 7th Edition H04L12/00 
Documents of the Prior Art: 

6. Taguchi, Atsushi et al; 6G"4; Investigation of the Log Collection Function which 
Focused on Traces; 57 th (2 nd half of 1998); National Symposium Treatise Collection 
(3); October 7, 1998; p. 3-514 to 3-515. 

7. Japanese Unexamined Patent Application 10-164064 

8. International Unexamined Patent Application 01/084285 

The record of the examination results relating to documents of the prior art does not 
constitute the grounds for rejection. 



